Retirement: hsmPlatform 1 Keys in Azure Key Vault

As part of our ongoing commitment to improving security and performance, we will be retiring support for hsmPlatform 1 keys, effective September 15, 2028. To ensure the continued security and functionality of your operations, we recommend transitioning to hsmPlatform 2 keys as soon as possible.

How to Identify Affected Resources

To determine which resources are impacted:

• You can list your keys and check the HSMPlatform value to confirm which ones require migration. For reference, see Azure Key Vault Key Attributes.

Required action

Keys cannot be directly transferred from hsmPlatform 1 to hsmPlatform 2.

To migrate:

1.     Create new keys on hsmPlatform 2.

2.     Rekey or roll your operations to utilize the newly created keys.

For detailed instructions, please refer to this documentation, which outlines the process step by step.

Important Reminder

Avoid deleting the old tenant key until it is no longer needed for content or documents protected under it. If you need to migrate existing documents:

1.     Remove the protection applied with the old tenant key.

2.     Reapply protection using the new tenant key.